Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
File: U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft (raw, json)
Hash identifier: UzwluZFlw32oEna4gHyYLJwbAPjHJza//1p8I7uFV/M=
Subject key identifier: E8:82:C8:2A:36:DE:3B:27:70:13:96:5E:10:3C:80:3A:83:12:9C:42
Authority key identifier: 53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
Certificate issuer: /CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Certificate serial: 0196AC1FE7E4E11D9585A41BD0C8AEAC394A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
Manifest number: 1528
Signing time: Wed 07 May 2025 19:01:34 +0000
Manifest this update: Wed 07 May 2025 19:01:34 +0000
Manifest next update: Thu 08 May 2025 19:01:34 +0000
Files and hashes: 1: CMb4sSALz-KpBLSc_havR1--Rcg.roa (hash: tSEX+cRvKAqr6srk3pPXDdRAbuuNHsu00QGpp8uCSYw=)
2: Lf-7J_CEiQS4b7WeR5Eaw4iyRLQ.roa (hash: 99fN5956ngv/TFkL8FxEzwLHD53MuB+d8ra8OJh/4dM=)
3: U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl (hash: AZIFsCv7kvajwOHMLiArCccibP57UjkqX++d7a/2yKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 19:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:1f:e7:e4:e1:1d:95:85:a4:1b:d0:c8:ae:ac:39:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Validity
Not Before: May 7 19:01:34 2025 GMT
Not After : May 8 19:01:34 2025 GMT
Subject: CN=e882c82a36de3b277013965e103c803a83129c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:00:98:ec:ee:28:2a:78:5a:3f:ac:02:8f:f3:
5e:d3:a1:92:9d:ae:d1:b4:22:5b:39:c5:93:70:18:
9a:37:cb:b4:57:99:d1:61:e2:57:0a:78:63:86:a2:
79:80:91:93:01:55:4c:d4:b4:84:28:73:90:39:85:
ae:7a:b9:da:8d:44:90:70:4b:a2:a4:b1:83:06:43:
2a:f6:92:94:ae:54:0d:0b:1c:24:b3:b5:05:29:c6:
f3:53:8d:d3:8c:26:2f:71:32:ed:5d:f9:8e:dd:2e:
2e:15:bf:d0:85:25:6e:bd:80:e7:55:7a:18:9b:bb:
37:3d:53:dd:10:35:e9:36:2f:75:db:fe:90:b3:11:
b5:fe:14:02:6c:c2:e0:96:3a:ef:81:7e:e4:92:5e:
39:de:78:21:cc:e7:61:0f:6e:ac:03:f2:43:af:62:
1b:46:13:2b:1f:2c:e8:33:0c:91:cf:ff:4f:60:30:
08:5a:88:89:67:9c:dd:8f:b1:5f:8b:4a:1c:02:e0:
fd:8d:4a:ad:11:bc:11:44:a8:6f:28:b4:d3:b6:d7:
29:63:31:ff:92:af:af:e1:c2:61:7d:cd:ab:b3:d3:
83:4b:8d:d3:0d:b7:84:66:02:e2:b3:7a:00:ea:94:
da:2e:a0:d3:3d:a0:e8:14:6b:6f:22:fc:d7:fe:8c:
64:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:82:C8:2A:36:DE:3B:27:70:13:96:5E:10:3C:80:3A:83:12:9C:42
X509v3 Authority Key Identifier:
keyid:53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a9:09:16:4a:2e:9b:43:e1:07:49:d6:a4:f0:8b:1e:0e:d3:
91:f7:cf:e4:d1:32:4b:19:7e:54:92:81:63:f9:78:b9:91:c5:
15:d1:92:1c:67:61:15:c1:56:ce:3a:38:db:d7:ea:e7:e9:08:
e8:e6:05:14:cd:4c:1d:5d:83:b7:8c:75:b2:98:6e:fb:81:de:
6d:40:b2:ca:d1:fa:2e:4a:3d:a5:45:ea:41:42:87:b6:db:4f:
02:c4:83:bf:5a:00:d8:eb:2d:c7:60:81:78:9e:cc:32:cd:cb:
2c:f0:02:b4:8f:4e:af:44:4a:b3:63:ad:82:04:9f:9c:0d:38:
38:dd:04:98:3d:9c:da:a8:4c:65:4f:ba:33:50:53:80:b7:32:
8a:98:27:1b:9d:4e:77:ec:19:69:d4:57:5d:2f:64:5b:a4:5a:
c7:a9:f1:98:2b:39:59:01:65:fe:ee:d0:e4:89:76:31:90:53:
84:cf:aa:7a:d6:2d:da:c2:74:7e:5f:1f:3c:2b:23:a0:e7:a1:
d6:9f:e2:06:04:57:2d:6f:df:60:ca:5b:c1:ae:d3:21:f5:b8:
a5:2e:97:2e:b7:52:61:d7:96:16:68:0b:d1:af:8c:df:1e:4c:
54:15:30:df:9b:93:c7:bb:37:b5:d3:fb:56:29:ed:2a:b4:0a:
d8:87:3c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 03:31:14 2025 by rpki-client